TBA Law Blog


Posted by: Stacey Shrader Joslin on Nov 7, 2022

Tennessee Attorney General Jonathan Skrmetti has announced that a 40-state group has obtained separate settlements from Experian and T-Mobile in connection with a three data breaches. Under a $12.67 million settlement, Experian has agreed to strengthen its due diligence and data security practices. It also will offer credit monitoring services to those who were affected by a 2015 breach. In addition, it agreed to pay $1 million to resolve claims against its subsidiary Experian Data Corp. for a 2012 data breach. In a separate $2.43 million settlement, T-Mobile agreed to detailed vendor management provisions designed to strengthen its vendor oversight. The agreement only includes claims from a 2015 breach. It does not include claims filed in connection with a data breach in 2021, which is still under investigation by a coalition of state attorneys general.